Penetration Testing

APRIL 1, 2024

JumpServer, a popular open-source bastion host system, has recently been found to contain two critical vulnerabilities (CVE-2024-29201 and CVE-2024-29202) that could allow attackers to execute arbitrary code remotely.

Penetration Testing 136

Penetration Testing Risk 136

Penetration Testing

APRIL 30, 2024

The vulnerability, tracked as CVE-2024-27790, has been... The post CVE-2024-27790: FileMaker Server Vulnerability Patched, Data Access Risk Addressed appeared first on Penetration Testing.

Penetration Testing 122

Penetration Testing Risk Software 122

Penetration Testing

FEBRUARY 26, 2024

Two security vulnerabilities (CVE-2024-24401 and CVE-2024-24402) have been identified in Nagios XI, a widely used enterprise-grade monitoring tool. These flaws pose significant risks for organizations utilizing the software. Nagios XI... The post CVE-2024-24401 & 24402: Nagios XI Security Flaws Found!

Penetration Testing 144

Penetration Testing Software Risk 144

Penetration Testing

JANUARY 2, 2025

Two flaws, tracked The post CVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk appeared first on Cybersecurity News. ASUS has issued a security advisory warning users of critical vulnerabilities affecting several router models.

Risk 125

Risk Cybersecurity 125

Penetration Testing

JANUARY 24, 2024

Photo Gallery is the leading... The post Over 200,000 Sites at Risk: Directory Traversal CVE-2024-0221 Vulnerability Hits Photo Gallery Plugin appeared first on Penetration Testing. The affected plugin, Photo Gallery by 10Web – Mobile-Friendly Image Gallery, has over 200,000 active installations.

Penetration Testing 125

Penetration Testing Risk Mobile 125

Penetration Testing

MARCH 8, 2024

Canon has released a security bulletin addressing a buffer overflow vulnerability (CVE-2024-2184, CVSS 9.8) Risk Assessment If an affected... The post Canon Printers: Critical CVE-2024-2184 (CVSS 9.8) Flaw Requires Immediate Firmware Update appeared first on Penetration Testing.

Firmware 141

Firmware Penetration Testing Risk 141

Penetration Testing

APRIL 22, 2024

This zero-day flaw, identified as CVE-2024-4040 with a CVSS score of 7.7, poses a severe risk to organizations... The post CVE-2024-4040: CrushFTP Users Targeted in Zero-Day Attack Campaign appeared first on Penetration Testing.

Penetration Testing 139

Penetration Testing Software Risk 139

Penetration Testing

FEBRUARY 19, 2024

A critical remote code execution (RCE) vulnerability (CVE-2024-25600, CVSS 9.8) This vulnerability is actively being exploited, rendering affected websites at significant risk.... ... The post CVE-2024-25600: WordPress’s Bricks Builder RCE Flaw Under Attack appeared first on Penetration Testing.

Penetration Testing 135

Penetration Testing Risk 135

Penetration Testing

MARCH 14, 2024

This vulnerability, designated as CVE-2024-27307, poses a serious security risk and could allow attackers... The post CVE-2024-27307: Critical Flaw in Popular JSONata Library Could Lead to Code Execution appeared first on Penetration Testing.

Penetration Testing 136

Penetration Testing Risk 136

Penetration Testing

FEBRUARY 22, 2024

A patched vulnerability within Apple’s Shortcuts automation framework presents a substantial risk to macOS and iOS devices.

Penetration Testing 131

Penetration Testing Risk 131

Penetration Testing

MARCH 8, 2024

What’s the Risk? The... The post CVE-2024-21899 (CVSS 9.8): Critical QNAP Flaw Opens Door to Hackers appeared first on Penetration Testing. These vulnerabilities, if left unaddressed, could provide attackers with various avenues for compromising affected devices.

Penetration Testing 135

Penetration Testing Software Risk Authentication 135

Penetration Testing

MARCH 7, 2024

A recently patched vulnerability (CVE-2024-2044) in pgAdmin, the widely-used PostgreSQL administration tool, highlights the ever-present risks of unsafe data deserialization and insufficient input validation.

Penetration Testing 123

Penetration Testing Risk 123

Penetration Testing

SEPTEMBER 22, 2024

Tracked as CVE-2024-8698,... The post CVE-2024-8698: Keycloak Vulnerability Puts SAML Authentication at Risk appeared first on Cybersecurity News.

Authentication 145

Authentication Risk Cybersecurity 145

Penetration Testing

MARCH 27, 2024

A serious security vulnerability, dubbed “WallEscape” (CVE-2024-28085), has been uncovered in the essential Linux system utilities package, util-linux.

Passwords 104

Passwords Penetration Testing Risk 104

Penetration Testing

MAY 26, 2024

VuFind, the widely used open-source library discovery platform, has issued an urgent security advisory, disclosing two critical vulnerabilities that could expose libraries and their users to serious risks.

Penetration Testing 109

Penetration Testing Risk 109

Penetration Testing

SEPTEMBER 2, 2024

A significant vulnerability, CVE-2024-8105, dubbed PKfail, has surfaced within the UEFI ecosystem. this flaw exposes critical UEFI security mechanisms to compromise, making systems vulnerable... The post CVE-2024-8105: An UEFI Flaw Putting Millions of Devices at Risk appeared first on Cybersecurity News.

Risk 145

Risk Cybersecurity 145

Penetration Testing

MARCH 5, 2024

HashiCorp’s Vault, a popular tool for securely managing sensitive data, contains a vulnerability (CVE-2024-2048, CVSS 8.1) Understanding... The post CVE-2024-2048: HashiCorp’s Vault Vulnerability Puts Secrets at Risk appeared first on Penetration Testing.

Penetration Testing 97

Penetration Testing Risk Authentication 97

Penetration Testing

MAY 7, 2024

This flaw (CVE-2024-29212) opens a door... The post CVE-2024-29212: Veeam RCE Vulnerability Exposes Data Protection Services to Risk appeared first on Penetration Testing.

Penetration Testing 98

Penetration Testing Risk Backups 98

Penetration Testing

SEPTEMBER 29, 2024

The flaw, tracked as CVE-2024-8353... The post CVE-2024-8353 (CVSS 10): Critical GiveWP Flaw, 100k WordPress Sites at Risk appeared first on Cybersecurity News.

Risk 145

Risk Cybersecurity 145

Penetration Testing

SEPTEMBER 29, 2024

In a significant development for the cybersecurity community, researchers have published technical details and a proof-of-concept (PoC) exploit for a newly identified vulnerability in the Linux kernel, designated as CVE-2024-26808....

Risk 141

Risk Cybersecurity 141

Penetration Testing

MARCH 26, 2024

The technical details and proof-of-concept (PoC) exploit code for a severe vulnerability in the Linux kernel (CVE-2024-1086) have been exposed, putting countless systems at risk. on the CVSS scale,... The post CVE-2024-1086: Critical Linux Kernel Flaw Demands Immediate Patching, PoC Published! This flaw, rated a 7.8

Penetration Testing 117

Penetration Testing Risk 117

Penetration Testing

MARCH 26, 2024

Critical Vulnerability and Large Payout CVE-2024-2883: Use after... The post Google Chrome Update Patches High-Risk Vulnerabilities appeared first on Penetration Testing. Google has released an important security update for its Chrome browser (version 123.0.6312.86/.87),

Penetration Testing 107

Penetration Testing Risk 107

Penetration Testing

JANUARY 8, 2024

A recently disclosed security flaw, identified as CVE-2024-0193, poses a significant risk to systems relying on this widely used... The post Linux Kernel Flaw CVE-2024-0193 Opens Root Access appeared first on Penetration Testing.

Penetration Testing 111

Penetration Testing Risk 111

Penetration Testing

JANUARY 10, 2024

Identified as CVE-2024-20272, this vulnerability allows unauthenticated attackers could gain root privileges on unpatched devices. Cisco Unity Connection lets users access and... The post Root Access Risk: Cisco Unity Connection’s CVE-2024-20272 Security Breach appeared first on Penetration Testing.

Penetration Testing 93

Penetration Testing Risk Software 93

Penetration Testing

JUNE 3, 2024

with over 2 million monthly downloads, has been found to contain a severe security vulnerability that could leave countless applications at risk. Tracked as CVE-2024-21512 and... The post CVE-2024-21512: MySQL2 Vulnerability Puts Millions of Downloads at Risk appeared first on Penetration Testing.

Penetration Testing 91

Penetration Testing Risk 91

Penetration Testing

NOVEMBER 11, 2024

A newly discovered security vulnerability, CVE-2024-47295, affecting multiple SEIKO EPSON products, could allow attackers to take control of devices with administrative privileges.

Risk 117

Risk Passwords Cybersecurity 117

Penetration Testing

DECEMBER 19, 2024

resolves multiple vulnerabilities that pose significant risks, including... The post CVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws appeared first on Cybersecurity News. Foxit has released a crucial security update for its widely used Foxit PDF Reader and Foxit PDF Editor.

Risk 137

Risk Cybersecurity 137

Penetration Testing

APRIL 9, 2024

A critical vulnerability in the Rust standard library has been uncovered, exposing Windows-based systems to the risk of arbitrary code execution.

Penetration Testing 111

Penetration Testing Risk 111

Penetration Testing

MARCH 26, 2024

A security vulnerability in TeamViewer has been uncovered, putting macOS users of older versions at significant risk. This “symlink” flaw could allow attackers to elevate their privileges on a target machine and potentially cause... The post CVE-2024-1933: TeamViewer Bug Exposes macOS Users: Update Immediately!

Penetration Testing 111

Penetration Testing Risk 111

Penetration Testing

NOVEMBER 18, 2024

A recent security advisory from the LibreNMS project has revealed a severe vulnerability (CVE-2024-51092) affecting versions up to 24.9.1 The flaw, rated a critical... The post LibreNMS Vulnerability (CVE-2024-51092): Mitigating the Risk of Server Compromise appeared first on Cybersecurity News.

Risk 123

Risk Cybersecurity 123

Penetration Testing

JULY 5, 2024

This tool, known for its robust capabilities and cross-platform... The post CVE-2024-6376 (CVSS 9.8) in MongoDB Compass Exposes Systems to Code Injection Risks appeared first on Cybersecurity News.

Risk 137

Risk Cybersecurity 137

Penetration Testing

JANUARY 17, 2024

A critical flaw, identified as CVE-2024-22406 with a CVSS score... The post Ecommerce Alert: Shopware Hit by Critical-Risk CVE-2024-22406 Flaw appeared first on Penetration Testing.

eCommerce 85

eCommerce Penetration Testing Risk Cybersecurity 85

Penetration Testing

JULY 17, 2024

The Apache Software Foundation has issued a security advisory regarding two critical vulnerabilities, CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61.

Risk 111

Risk Software Cybersecurity 111

Penetration Testing

JULY 25, 2024

A critical vulnerability (CVE-2024-40767) has been discovered in OpenStack Nova, the open-source cloud computing platform’s core component for managing virtual servers.

Risk 123

Risk Cybersecurity 123

Penetration Testing

JANUARY 21, 2024

In the interconnected realm of modern technology, where devices ranging from NAS systems to next-gen routers and headless home servers become the backbone of our digital lives, the software that powers them is of... The post CVE-2024-22416: Exposing pyLoad’s High-Risk CSRF Vulnerability appeared first on Penetration Testing.

Penetration Testing 82

Penetration Testing Risk Technology Software 82

Penetration Testing

SEPTEMBER 16, 2024

With over 166k stars on GitHub, AutoGPT has gained popularity... The post 166k+ Projects at Risk: AutoGPT’s Critical Vulnerability Explained – CVE-2024-6091 (CVSS 9.8) A significant security vulnerability has been discovered in AutoGPT, a powerful AI tool designed to automate tasks through intelligent agents.

Risk 129

Risk Cybersecurity 129

Penetration Testing

FEBRUARY 4, 2024

These vulnerabilities tracked as CVE-2024-25089 and CVE-2023-36631, pose significant risks... The post CVE-2024-25089: RCE Risk in Malwarebytes Binisoft Windows Firewall Control appeared first on Penetration Testing.

Firewall 80

Firewall Penetration Testing Risk 80